Elasticsearch
Approved changes feed: RSS · Atom
cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Elastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037) |
|---|---|
| Product | Elasticsearch (a0208702-3648-5bff-bba8-04bce4d71093) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.858675 |
pkg:elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.858678 |
pkg:github/elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.858679 |
pkg:rpm/opensuse/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.858681 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-63263 |
vulnerable | 2026-07-29 01:06:19.331787 |
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
MEDIUM (6.5)
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource exhaustion persists beyond query completion, repeated requests can fully exhaust the available query worker resources, rendering ES|QL queries unavailable until the node is restarted.
Published: 2026-07-21T23:10:49.155Z
Updated: 2026-07-22T13:07:01.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-63136 |
vulnerable | 2026-07-29 01:06:19.322289 |
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
MEDIUM (6.5)
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. An attacker could leverage this vulnerability to cause cluster downtime requiring manual intervention to restore service.
Published: 2026-07-21T20:20:07.409Z
Updated: 2026-07-22T19:41:00.574Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56149 |
vulnerable | 2026-07-29 01:00:28.924995 |
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
MEDIUM (4.9)
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the affected node unavailable.
Published: 2026-07-01T16:21:24.437Z
Updated: 2026-07-01T17:25:09.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56148 |
vulnerable | 2026-07-29 01:00:28.924747 |
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
MEDIUM (6.5)
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affected node unavailable.
Published: 2026-07-01T16:17:05.998Z
Updated: 2026-07-01T17:25:09.726Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56145 |
vulnerable | 2026-07-29 01:00:28.922689 |
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
MEDIUM (6.5)
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user with permission to execute EQL sequence queries against an index they control can send a specially crafted query that triggers excessive memory consumption, causing the Elasticsearch node to crash.
Published: 2026-07-21T20:04:47.033Z
Updated: 2026-07-22T18:25:22.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56144 |
vulnerable | 2026-07-29 01:00:28.922417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49090 |
vulnerable | 2026-07-29 00:57:44.982778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68390 |
vulnerable | 2026-06-08 07:41:21.096973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68384 |
vulnerable | 2026-06-08 07:41:21.093890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37731 |
vulnerable | 2026-06-08 07:21:02.342904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-37727 |
vulnerable | 2026-06-08 07:21:02.337499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52981 |
vulnerable | 2026-06-08 06:54:12.089941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52980 |
vulnerable | 2026-06-08 06:54:12.089649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52979 |
vulnerable | 2026-06-08 06:54:12.089214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43709 |
vulnerable | 2026-06-08 06:45:52.913459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37280 |
vulnerable | 2026-06-08 06:39:47.047958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23451 |
vulnerable | 2026-06-08 06:29:39.747944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23450 |
vulnerable | 2026-06-08 06:29:39.747590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23449 |
vulnerable | 2026-06-08 06:29:39.747100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23445 |
vulnerable | 2026-06-08 06:29:39.742772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23444 |
vulnerable | 2026-06-08 06:29:39.742179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12539 |
vulnerable | 2026-06-08 06:25:35.506590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49921 |
vulnerable | 2026-06-08 06:16:10.723019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46674 |
vulnerable | 2026-06-08 06:14:22.735974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46673 |
vulnerable | 2026-06-08 06:14:22.734333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31419 |
vulnerable | 2026-06-08 06:04:43.099180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31418 |
vulnerable | 2026-06-08 06:04:43.096341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31417 |
vulnerable | 2026-06-08 06:04:43.095841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23712 |
vulnerable | 2026-06-08 05:40:58.280865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23708 |
vulnerable | 2026-06-08 05:40:58.278417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37937 |
vulnerable | 2026-06-08 05:32:55.321949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22147 |
vulnerable | 2026-06-08 05:29:59.937396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22145 |
vulnerable | 2026-06-08 05:29:59.934921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22144 |
vulnerable | 2026-06-08 05:29:59.934486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22138 |
vulnerable | 2026-06-08 05:29:59.927762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22137 |
vulnerable | 2026-06-08 05:29:59.927437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22135 |
vulnerable | 2026-06-08 05:29:59.925227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22134 |
vulnerable | 2026-06-08 05:29:59.924763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22132 |
vulnerable | 2026-06-08 05:29:59.921695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7021 |
vulnerable | 2026-06-08 05:27:11.745678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7020 |
vulnerable | 2026-06-08 05:27:11.745298 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7019 |
vulnerable | 2026-06-08 05:27:11.744786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7014 |
vulnerable | 2026-06-08 05:27:11.732939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7009 |
vulnerable | 2026-06-08 05:27:11.726328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7619 |
vulnerable | 2026-06-08 05:14:14.591610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7614 |
vulnerable | 2026-06-08 05:14:14.582198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7611 |
vulnerable | 2026-06-08 05:14:14.579349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3831 |
vulnerable | 2026-06-08 05:11:41.321091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3827 |
vulnerable | 2026-06-08 05:11:41.316244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3826 |
vulnerable | 2026-06-08 05:11:41.314891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17247 |
vulnerable | 2026-06-08 05:11:06.196728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17244 |
vulnerable | 2026-06-08 05:11:06.194768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5377 |
vulnerable | 2026-06-08 05:06:49.922817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1427 |
vulnerable | 2026-06-08 05:06:25.650625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3120 |
vulnerable | 2026-06-08 05:05:31.218163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.